5ddf5c9980450966d9a9a16f7cf8e0f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ddf5c9980450966d9a9a16f7cf8e0f7_JaffaCakes118
Size

2KB
MD5

5ddf5c9980450966d9a9a16f7cf8e0f7
SHA1

19a5f95f81fd61392f87b805ecb36aa23406d27f
SHA256

2a866fd9ce3c7efdc44bc938f94966de7073767d2c5305f45429fd505d1bf6d9
SHA512

bf174ae51fac8e13346a9e3f02b1b87cf1f6dbcb6ef85a383ff05268071046a775ac382a4ba82d9bf8f48e9a3dbb6df6349759dc0dbdf0d60d15c18b7f66e533

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ddf5c9980450966d9a9a16f7cf8e0f7_JaffaCakes118

Files

5ddf5c9980450966d9a9a16f7cf8e0f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

621b4cd52e54a1f5a1dd2e20d89bcb96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExW
GetMessageW
CreateWindowExW
DispatchMessageW
DefWindowProcW
TranslateMessage

kernel32

WinExec
lstrlenA
WriteFile
RtlZeroMemory
GlobalFree
GlobalAlloc
GetModuleHandleA
CloseHandle
CreateFileA
ExitProcess

ws2_32

WSACleanup
WSAStartup
closesocket
connect
gethostbyname
htons
recv
send
socket

Sections

.text
Size: 1024B - Virtual size: 870B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 694B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ